Abstract
Today’s workforce is generally uneducated in cybersecurity, largely complacent, and fails to embrace the reality that ‘a risk to one is a risk to all’. A cyber-aware mindset must be instilled in improved training across the workforce. We are developing a training game designed to improve cyber awareness with the goal of inculcating “cyber mindset” to reduce vulnerabilities to and increase vigilance toward cyber threats. The game stresses critical thinking, intellectual engagement, and countering cognitive biases. We introduce the design and implementation of the training game. Creating effective cyber awareness training is often challenging due to resistance and disinterest from target populations. We outline the current implementation of the training game and introduce additional features or “mechanics” we have developed and also continue to investigate to attempt to improve the game’s effectiveness in developing a cyber mindset.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Cortada, J.W.: The Digital Hand: How Computers Changed the Work of American Manufacturing, Transportation, and Retail Industries. Oxford University Press, Oxford (2003)
Varol, O., Ferrara, E., Davis, C.A., Menczer, F., Flammini, A.: Online human-bot interactions: detection, estimation, and characterization. In: Proceedings of the Eleventh International AAAI Conference on Web and Social Media (ICWSM 2017). AAAI Press (2017)
Schreckinger, B.: How Russia Targets the U.S. Military. Politico (2017)
Kettani, H., Wainwright, P.: On the top threats to cyber systems. In: 2019 IEEE 2nd International Conference on Information and Computer Technologies (ICICT), pp. 175–179 (2019)
Howard, P.N., Ganesh, B., Liotsiou, D., Kelly, J., François, C.: The IRA, Social Media and Political Polarization in the United States, 2012–2018. Project on Computational Propaganda, p. 46. Oxford University, Oxford (2018)
Adebiaye, R., Alryalat, H., Owusu, T.: Perspectives for cyber-deterrence: a quantitative analysis of cyber threats and attacks on consumers. Int. J. Innov. Res. Sci. Eng. Technol. 5, 12946–12962 (2016)
Suraj, M., Singh, N.K., Tomar, D.S.: Big data analytics of cyber attacks: a review. In: 2018 IEEE International Conference on System, Computation, Automation and Networking (ICSCA), pp. 1–7. IEEE (2018)
Sumi, F.H., Dutta, L., Sarker, F.: A review on cyberattacks and their preventive measures. Int. J. Cyber Res. Educ. (IJCRE) 1, 12–29 (2019)
Chowdhury, A.: Recent cyber security attacks and their mitigation approaches – an overview. In: Batten, L., Li, G. (eds.) ATIS 2016. CCIS, vol. 651, pp. 54–65. Springer, Singapore (2016). https://doi.org/10.1007/978-981-10-2741-3_5
Mezzour, G., Carley, K.M., Carley, L.R.: An empirical study of global malware encounters. In: Proceedings of the 2015 Symposium and Bootcamp on the Science of Security, pp. 1–11 (2015)
Thornton-Trump, I.: Malicious attacks and actors: an examination of the modern cyber criminal. EDPACS 57, 17–23 (2018)
Mezzour, G., Carley, L., Carley, K.M.: Global mapping of cyber attacks. SSRN 2729302 (2014)
Neville, K., Flint, L., Massey, L., Nickels, A., Medina, J., Bolton, A.: Training to instill a cyber-aware mindset. In: Schmorrow, Dylan D., Fidopiastis, Cali M. (eds.) HCII 2019. LNCS (LNAI), vol. 11580, pp. 299–311. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-22419-6_21
Amankwa, E., Loock, M., Kritzinger, E.: A conceptual analysis of information security education, information security training and information security awareness definitions. In: The 9th International Conference for Internet Technology and Secured Transactions, London, pp. 248–252. IEEE Press (2014)
Aldawood, H., Skinner, G.: Reviewing cyber security social engineering training and awareness programs - pitfalls and ongoing issues. Future Internet 11, 73 (2019)
Ghafir, I., et al.: Security threats to critical infrastructure: the human factor. Supercomputing 74, 4956–5002 (2018)
Hadnagy, C.: Social Engineering: The Art of Human Hacking. Wiley, Hoboken (2010)
Caldwell, T.: Making security awareness training work. Comput. Fraud Secur. 2016, 8–14 (2016)
Hendrix, M., Al-Sherbaz, A., Victoria, B.: Game based cyber security training: are serious games suitable for cyber security training? Int. J. Serious Games 3, 53–61 (2016)
McGonigal, J.: Reality Is Broken: Why Games Make Us Better and How They Can Change the World. Penguin Press, New York (2011)
De Corte, E.: Transfer as the productive use of acquired knowledge, skills, and motivations. Curr. Dir. Psychol. Sci. 12, 143–146 (2003)
Krombholz, K., Hobel, H., Huber, M., Weippl, E.: Advanced social engineering attacks. J. Inf. Secur. Appl. 22, 113–122 (2015)
Bada, M., Sasse, A., Nurse, J.R.: Cyber security awareness campaigns: why do they fail to change behaviour? In: International Conference on Cyber Security for Sustainable Society, Coventry, UK, pp. 118–131 (2015)
Hwang, G.-J., Wu, P.-H., Chen, C.-C., Tu, N.-T.: Effects of an augmented reality-based educational game on students’ learning achievements and attitudes in real-world observations. Interact. Learn. Environ. 24, 1895–1906 (2016)
Hamari, J., Shernoff, D.J., Rowe, E., Coller, B., Asbell-Clarke, J., Edwards, T.: Challenging games help students learn: an empirical study on engagement, flow and immersion in game-based learning. Comput. Hum. Behav. 54, 170–179 (2016)
Koedinger, K.R., Booth, J.L., Klahr, D.: Instructional complexity and the science to constrain it. Science 342, 935–937 (2013)
Sitzmann, T., Ely, K.: A meta-analysis of self-regulated learning in work-related training and educational attainment: what we know and where we need to go. Psychol. Bull. 137, 421–442 (2011)
Heeter, C., Winn, B.: Implications of gender, player type and learning strategies for the design of games for learning. In: Kafai, Y., Heeter, C., Denner, J., Sun, J. (eds.) Beyond Barbie and Mortal Kombat: New Perspectives on Gender and Gaming. MIT Press, Cambridge (2008)
Heeter, C., Magerko, B., Medler, B., Fitzgerald, J.: Matching game mechanics to player motivation. In: Meaningful Play Conference (2008)
Bontchev, B., Vassileva, D., Aleksieva-Petrova, A., Petrov, M.: Playing styles based on experiential learning theory. Comput. Hum. Behav. 85, 319–328 (2018)
Summerville, A., et al.: Procedural content generation via machine learning (PCGML). IEEE Trans. Games 10, 257–270 (2018)
Wearne, A., Wray, R.E.: Exploration of behavioral markers to support adaptive learning. In: Kurosu, M. (ed.) HCI 2018. LNCS, vol. 10903, pp. 355–365. Springer, Cham (2018). https://doi.org/10.1007/978-3-319-91250-9_28
Workshop on Brain, Body and Bytes: Psychophysiological User Interaction at CHI 2010, Atlanta, GA (2010)
Wray, R.E., Woods, A.: A cognitive systems approach to tailoring learner practice. In: Klenk, M., Laird, J. (eds.) Proceedings of the 2013 Advances in Cognitive Systems Conference, Baltimore, MD (2013)
Lane, H.C., Johnson, W.L.: Intelligent tutoring and pedagogical experience manipulation in virtual learning environments. In: Cohn, J., Nicholson, D., Schmorrow, D. (eds.) The PSI Handbook of Virtual Environments for Training and Education, vol. 3. Praeger Security International, Westport (2008)
Acknowledgements
This work was supported by the Office of Naval Research project N68335-18-C-0724 Cyber-RAMPART. The views and conclusions contained in this document are those of the authors and should not be interpreted as representing the official policies, either expressed or implied, of the Department of Defense or Office of Naval Research. The U.S. Government is authorized to reproduce and distribute reprints for Government purposes notwithstanding any copyright notation hereon. We thank colleagues and collaborators who have provided insights and operational perspectives in the development of the Cyber-RAMPART including Kelly Neville, Behrooz Mostafavi, Alex Nickels, Larry Flint, Julie Marble, Alice Jackson and Justin Bonny.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Wray, R., Massey, L., Medina, J., Bolton, A. (2020). Increasing Engagement in a Cyber-Awareness Training Game. In: Schmorrow, D., Fidopiastis, C. (eds) Augmented Cognition. Human Cognition and Behavior. HCII 2020. Lecture Notes in Computer Science(), vol 12197. Springer, Cham. https://doi.org/10.1007/978-3-030-50439-7_10
Download citation
DOI: https://doi.org/10.1007/978-3-030-50439-7_10
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-50438-0
Online ISBN: 978-3-030-50439-7
eBook Packages: Computer ScienceComputer Science (R0)